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1 . A system for analyzing traffic data in a distributed computing 
environment, the distributed computing environment comprising a plurality of 
5 interconnected systems operatively coupled to a server, the server configured to 
exchange data packets with each interconnected system, comprising: 

a source of traffic data hits, each traffic data hit corresponding to a data 
packet exchanged between the server and one such interconnected system; 

one or more results tables categorized by an associated data type, each 
1 0 results table comprising a plurality of records; 

means for collecting each traffic data hit from the traffic data hits 
source as access information into one such record in at least one results table 
according to the data type associated with the one such results table, each of the 
records in the results table corresponding to a different type of access information for 
1 5 the data type associated with the results table; 

means for summarizing periodically the access information collected 
into the results tables during a time slice into analysis results, the time slice 
corresponding to a discrete reporting period; and 

means for analyzing the access information from the results tables in 
2 0 the analysis results to form analysis summaries according to the data types associated 
with the results tables. 



2. A system according to claim 1, wherein each such interconnected 
system interfaces to the server via one of a network connection, a point-to-point 
2 5 connection and a dedicated connection. 



3. A system according to claim 1, wherein the server further comprises a 
log file operatively coupled to the server and storing the traffic data hits, the log file 
operating as the source of traffic data hits responsive to the collecting means. 
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4. A system according to claim 1, wherein the server further comprises a 
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database operatively coupled to the server and storing at least one of the traffic data 
hits and the analysis results, the database operating as the source of traffic data hits 
responsive to the collecting means. 



5 5. A system according to claim 1, further comprising: 

a user session table comprising one or more records which each store a 
pointer, each pointer corresponding to one of the results tables, the collecting means 
including a user session count for each such data type associated with each such 
results table, the user session count being stored in the user session table in each of 
10 the records; and 

one or more microtables, each of the micro tables including one or 
more indices and being associated with one of the results tables, each such index 
within the microtable logically referring to each such different type of access 
information collected in the associated results table, each such pointer in the user 
15 session table further logically referring to one of the microtables, the analyzing means 
further comprising means for adjusting the user session count for consecutive time 
slices. 

6. A system according to claim 5, further comprising: 

20 a container file comprising a table of contents and configured to store 

the one or more results tables, the user sessions table and the one or more microtables, 
the summarizing means further comprising means for mapping relative positions of 
each such results table within the container file into the table of contents and storing 
each such pointer in the user session table with the relative positions of each such 

2 5 microtable within the container file. 

7. A method for analyzing traffic data in a distributed computing 
environment, the distributed computing environment comprising a plurality of 
interconnected systems operatively coupled to a server, a source of traffic data hits 

3 0 and one or more results tables categorized by an associated data type, each results 

table comprising a plurality of records, the server configured to exchange data packets 
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with each interconnected system, each traffic data hit corresponding to a data packet 
exchanged between the server and one such interconnected system, the method 
comprising the steps of: 

collecting each traffic data hit from the traffic data hits source as 
access information into one such record in at least one results table according to the 
data type associated with the one such results table, each of the records in the results 
table corresponding to a different type of access information for the data type 
associated with the results table; 

summarizing periodically the access information collected into the 
results tables during a time slice into analysis results, the time slice corresponding to a 
discrete reporting period; and 

analyzing the access information from the results tables in the analysis 
results to form analysis summaries according to the data types associated with the 
results tables. 

8. A method according to claim 7, further comprising the step of 
interfacing each such interconnected system to the server via one of a network 
connection, a point-to-point connection and a dedicated connection. 

9. A method according to claim 7, further comprising the steps of: 
operatively coupling the server to a log file; and 

storing the traffic data hits from the traffic data hits source into the log file, the 
log file operating as the source of traffic data hits in the step of collecting each traffic 
data hit. 

10. A method according to claim 7, further comprising the steps of: 
operatively coupling the server to a database; and 

storing at least one of the traffic data hits from the traffic hits source and the 
analysis results into the log file, the database operating as the source of traffic data 
hits in the step of collecting each traffic data hit. 
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11. A method according to claim 7, wherein the distributed computing 
environment further comprises a user session table comprising one or more records 
which each store a pointer and one or more microtables, each pointer corresponding 
to one of the results tables, each of the microtables including one or more indices and 
5 being associated with one of the results tables, each such index within the microtable 
logically referring to each such different type of access information collected in the 
associated results table, each such pointer in the user session table further logically 
referring to one of the microtables, the method further comprising the steps of: 

counting a user session for each such data type associated with each 
1 0 such results table; 

storing the user session count stored in the user session table in each of 
the records; and 

adjusting the user session count for consecutive time slices. 

15 12. A method according to claim 1 1 , the distributed computing 

environment further comprising a container file comprising a table of contents and 
configured to store the one or more results tables, the user sessions table and the one 
or more microtables, the method further comprising the steps of: 

mapping relative positions of each such results table within the 
2 0 container file into the table of contents; and 

storing each such pointer in the user session table with the relative 
positions of each such microtable within the container file. 

13. A method according to claim 7, the step of analyzing the access 

2 5 information further comprising the steps of: 

defining a time frame comprising a discrete period of time; and 
analyzing the analysis results for each such time slice occurring within 
the time frame based on availability of access information in the analysis results. 

3 0 14. A method according to claim 13, the step of analyzing the analysis 

results comprising one pass and further comprising the steps of: 
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summarizing the access information available as analysis summaries in 
the analysis results; 

performing the step of summarizing periodically the access 
information for each such time slice occurring within the time frame whereby analysis 
5 summaries are not available but access information from the results table is available 
in the analysis results; 

summarizing the analysis summaries formed in the preceding step; 

performing the steps of collecting each traffic data hit and 
summarizing periodically the access information for each such time slice occurring in 
10 the time frame whereby analysis summaries and access information from the results 
table are not available in the analysis results; and 

summarizing the analysis summaries formed in the preceding step. 

15. A method according to claim 13, the step of analyzing the analysis 
15 results comprising two passes and further comprising the steps of: 

performing the step of summarizing periodically the access 
information for each such time slice occurring within the time frame whereby analysis 
summaries are not available but access information from the results table is available 
in the analysis results; 

2 0 performing the steps of collecting each traffic data hit and 

summarizing periodically the access information for each such time slice occurring in 
the time frame whereby analysis summaries and access information from the results 
table are not available in the analysis results; and 

summarizing the access information available as analysis summaries in 

2 5 the analysis results. 

16. A storage medium embodying computer-readable code for analyzing 
traffic data in a distributed computing environment, the distributed computing 
environment comprising a plurality of interconnected systems operatively coupled to 

30 a server, a source of traffic data hits and one or more results tables categorized by an 
; associated data type, each results table comprising a plurality of records, the server 

> 
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configured to exchange data packets with each interconnected system, each traffic 
data hit corresponding to a data packet exchanged between the server and one such 
interconnected system, comprising: 

means for collecting each traffic data hit from the traffic data hits 
5 source as access information into one such record in at least one results table 
according to the data type associated with the one such results table, each of the 
records in the results table corresponding to a different type of access information for 
the data type associated with the results table; 

means for summarizing periodically the access information collected 
1 0 into the results tables during a time slice into analysis results, the time slice 
corresponding to a discrete reporting period; and 

means for analyzing the access information from the results tables in 
the analysis results to form analysis summaries according to the data types associated 
with the results tables. 

15 

17. A storage medium according to claim 16, wherein the distributed 
computing environment further comprises a user session table comprising one or 
more records which each store a pointer and one or more microtables, each pointer 
corresponding to one of the results tables, each of the microtables including one or 
2 0 more indices and being associated with one of the results tables, each such index 
within the microtable logically referring to each such different type of access 
information collected in the associated results table, each such pointer in the user 
session table further logically referring to one of the microtables, further comprising: 
means for counting a user session for each such data type associated 

2 5 with each such results table; 

means for storing the user session count stored in the user session table 
in each of the records; and 

means for adjusting the user session count for consecutive time slices. 

3 0 18. A storage medium according to claim 16, the means for analyzing the 

access information further comprising: 
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means for defining a time frame comprising a discrete period of time; 

and 

means for analyzing the analysis results for each such time slice 
occurring within the time frame based on availability of access information in the 
analysis results. 

19. A storage medium according to claim 16, the means for analyzing the 
analysis results comprising one pass and further comprising: 

means for summarizing the access information available as analysis 
summaries in the analysis results; 

means for performing the step of summarizing periodically the access 
information for each such time slice occurring within the time frame whereby analysis 
summaries are not available but access information from the results table is available 
in the analysis results; 

means for summarizing the analysis summaries formed in the 

preceding step; 

means for performing the steps of collecting each traffic data hit and 
summarizing periodically the access information for each such time slice occurring in 
the time frame whereby analysis summaries and access information from the results 
table are not available in the analysis results; and 

means for summarizing the analysis summaries formed in the 

preceding step. 

20. A storage medium according to claim 16, the means for analyzing the 
analysis results comprising two passes and further comprising: 

means for performing the step of summarizing periodically the access 
information for each such time slice occurring within the time frame whereby analysis 
summaries are not available but access information from the results table is available 
in the analysis results; 

means for performing the steps of collecting each traffic data hit and 
summarizing periodically the access information for each such time slice occurring in 
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the time frame whereby analysis summaries and access information from the results 
table are not available in the analysis results; and 

means for summarizing the access information available as analysis 
summaries in the analysis results. 

5 
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